| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | = 2.2= 2.2.4= 2.3= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.4= 2.4.1= 2.4.2= 2.4.3≤ 2.1.5 |
The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via vectors related to LJIF tags in an MJPEG file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free